2024-07-03 18:04:20
“We want to assure our members that this investigation by the State Data Protection Inspectorate has nothing to do with the security of their accounts or the improper use of their personal data.” We take GDPR and privacy very seriously, investing heavily in compliance and the security of our members. During the entire process, we cooperated with the VDAI,” explains Vinted in a comment sent to Eltai.
“However, we do not see any legal basis for this VDAI decision and believe that it sets a new precedent that goes beyond legal regulation and best practices in the field.” We completely disagree with the decision and will appeal it to the court,” the company notes.
On Wednesday, VDAI allocated almost 2.4 million EUR administrative fine to UAB Vinted, which manages the online second-hand clothing trade and exchange platform “Vinted”.
The fine was imposed after the VDAI examined the applicants’ complaints forwarded by the French and Polish supervisory authorities and found violations of the General Data Protection Regulation (GDPR).
During the investigation of complaints, it was established that, in order to ensure the safety of the platform and its users, the company applied “shadow blocking” (processing of personal data, carried out with the aim that a person who might be in violation of the Vinted platform) unlawfully, in violation of the principles of honesty and transparency, towards some applicants operational principles, would leave the platform without knowing about such processing of his personal data).
In addition, the company did not take sufficient technical and organizational measures to ensure the implementation of the principle of accountability and to be able to prove that it had taken steps regarding the right to access the data.
2024-07-03 18:04:20